Fisheye on lams-github/lams_build/lib/csrfguard

lams-github (): LDEV-5440 Update libraries to new versions

Marcin Cieslak — Wed, 20 Mar 2024 09:52:32 +0100

Marcin Cieslak committed 5661c79 on branch in lams-github

LDEV-5440 Update libraries to new versions

· /idea_project/.idea/libraries/3rdParty.xml

(-8, +12)

| History

| Source

| Diff

· /lams_build/3rdParty.userlibraries

(-7, +9)

| History

| Source

| Diff

· /lams_build/build.xml

(-2, +41)

| History

| Source

| Diff

· /lams_build/build_base.xml

(-12, +18)

| History

| Source

| Diff

· /lams_build/conf/j2ee/jboss-deployment-structure.xml

(-1, +4)

| History

| Source

| Diff

· /lams_build/deploy-tool/deploy.bat

(-1, +1)

| History

| Source

| Diff

· /lams_build/deploy-tool/deploy.sh

(-1, +1)

| History

| Source

| Diff

· /lams_build/deploy-tool/lib/xstream-1.4.10.jar

(binary)

| History

| Source

| Diff

· /lams_build/deploy-tool/lib/xstream-1.4.20.jar

(binary)

| History

| Source

· /lams_build/lib/apache-poi/poi.module.xml

(-3, +0)

| History

| Source

| Diff

· /lams_build/lib/apache-poi/xmlbeans.module.xml

(-4, +0)

| History

| Source

| Diff

· /lams_build/lib/apache-tika/tika.module.xml

(-1, +0)

| History

| Source

| Diff

· /lams_build/lib/basiclti-util/basiclti-util-1.2.0-jakarta.jar

(binary)

| History

| Source

· /lams_build/lib/basiclti-util/basiclti-util.module.xml

(-12, +1)

| History

| Source

| Diff

· /lams_build/lib/basiclti-util/oauth.module.xml

(-11, +0)

| History

| Source

| Diff

… 56 more files in changeset.

lams-github (): LDEV-5440 Update CSRFGuard from 4.1.3 to 4.3.0-jakarta...

Marcin Cieslak — Tue, 20 Feb 2024 13:08:23 +0100

Marcin Cieslak committed 881ef4e on branch in lams-github

LDEV-5440 Update CSRFGuard from 4.1.3 to 4.3.0-jakarta

Customisation was needed:

In CsrfGuardUtils use

public static String normalizeResourceURI(final String resourceURI) {

String normalizedResourceURI = resourceURI.startsWith("/") ? resourceURI : '/' + resourceURI;

// LAMS LDEV-4932 Replace multiple slashes with a single one, so it works the same as Spring MVC

normalizedResourceURI = normalizedResourceURI.replaceAll("/{2,}", "/");

return normalizedResourceURI;

}

Also update WF module schemas.

· /idea_project/.idea/libraries/3rdParty.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/apache-poi/compress.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/apache-poi/math.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/apache-poi/poi.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/apache-poi/sparse-bit-set.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/apache-poi/xmlbeans.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/apache-tika/tika.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/basiclti-util/basiclti-util.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/basiclti-util/oauth.module.xml

(-2, +2)

| History

| Source

| Diff

· /lams_build/lib/basiclti-util/signpost.module.xml

(-2, +2)

| History

| Source

| Diff

· /lams_build/lib/batik/batik.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/clamav/clamav.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/clamav/kotlin.logging.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/clamav/kotlin.stdlib.module.xml

(-1, +1)

| History

| Source

| Diff

· /lams_build/lib/csrfguard/csrf.module.xml

(-4, +4)

| History

| Source

| Diff

… 30 more files in changeset.

lams-github (v4.7): LDEV-4932 Squash multiple slashes into one when matching secured paths

Marcin Cieslak — Sun, 03 Apr 2022 08:15:22 +0200

Marcin Cieslak committed cc49bb0 on branch v4.7, v4.8 in lams-github

LDEV-4932 Squash multiple slashes into one when matching secured paths

· /3rdParty_sources/csrfguard/org/owasp/csrfguard/util/CsrfGuardUtils.java	(-1, +6)	\| History	\| Source	\| Diff
· /3rdParty_sources/versions.txt	(-1, +2)	\| History	\| Source	\| Diff
· /lams_build/lib/csrfguard/csrf.module.xml	(-1, +1)	\| History	\| Source	\| Diff
· /lams_build/lib/csrfguard/csrfguard-4.1.3-custom-2022.04.03.jar	(binary)	\| History	\| Source
· /lams_build/lib/csrfguard/csrfguard-4.1.3.jar	(binary)	\| History	\| Source	\| Diff
· /lams_build/liblist.txt	(-2, +2)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-5304 Update CSRF Guard to version 4.1.3

Marcin Cieslak — Sun, 03 Apr 2022 08:02:27 +0200

Marcin Cieslak committed 3582a26 on branch v4.7, v4.8 in lams-github

LDEV-5304 Update CSRF Guard to version 4.1.3

· /lams_build/lib/csrfguard/csrf.module.xml	(-1, +5)	\| History	\| Source	\| Diff
· /lams_build/lib/csrfguard/csrfguard-3.1.0-custom-2020.01.07.jar	(binary)	\| History	\| Source	\| Diff
· /lams_build/lib/csrfguard/csrfguard-4.1.3.jar	(binary)	\| History	\| Source
· /lams_build/lib/csrfguard/csrfguard-extension-session-4.1.3.jar	(binary)	\| History	\| Source
· /lams_build/lib/csrfguard/csrfguard-jsp-tags-4.1.3.jar	(binary)	\| History	\| Source
· /lams_build/liblist.txt	(-2, +1)	\| History	\| Source	\| Diff
· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-2, +6)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4932 Squash multiple slashes into one when matching secured paths

Marcin Cieslak — Tue, 07 Jan 2020 10:31:49 +0100

Marcin Cieslak committed f933893 on branch v4.7, v4.8 in lams-github

LDEV-4932 Squash multiple slashes into one when matching secured paths

· /lams_build/lib/csrfguard/csrf.module.xml	(-1, +1)	\| History	\| Source	\| Diff
· /lams_build/lib/csrfguard/csrfguard-3.1.0-2019.12.19.jar	(binary)	\| History	\| Source	\| Diff
· /lams_build/lib/csrfguard/csrfguard-3.1.0-custom-2020.01.07.jar	(binary)	\| History	\| Source

lams-github (v4.7): Revert "LDEV-4932 Initial integration of CSRF Guard"...

Marcin Cieslak — Thu, 19 Dec 2019 16:01:58 +0100

Marcin Cieslak committed 24f0886 on branch v4.7, v4.8 in lams-github

Revert "LDEV-4932 Initial integration of CSRF Guard"

This reverts commit c5a709e4cb42d0729ad3fbd814714fb27dd844df.

It should have been in a separate branch.

· /lams_build/build.xml	(-8, +0)	\| History	\| Source	\| Diff
· /lams_build/build_base.xml	(-7, +0)	\| History	\| Source	\| Diff
· /lams_build/conf/j2ee/jboss-deployment-structure.xml	(-1, +0)	\| History	\| Source	\| Diff
· /lams_build/lib/csrfguard/csrf.module.xml	(-34, +0)	\| History	\| Source	\| Diff
· /lams_build/lib/csrfguard/csrfguard-3.1.0-2019.12.19.jar	(binary)	\| History	\| Source	\| Diff
· /lams_central/build.xml	(-7, +0)	\| History	\| Source	\| Diff
· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-3, +0)	\| History	\| Source	\| Diff
· /lams_central/web/WEB-INF/tlds/security/csrfguard.tld	(-70, +0)	\| History	\| Source	\| Diff
· /lams_central/web/WEB-INF/web.xml	(-33, +1)	\| History	\| Source	\| Diff
· /lams_central/web/profile/editprofile.jsp	(-3, +1)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4932 Initial integration of CSRF Guard...

Marcin Cieslak — Thu, 19 Dec 2019 16:00:45 +0100

Marcin Cieslak committed c5a709e on branch v4.7, v4.8 in lams-github

LDEV-4932 Initial integration of CSRF Guard

Add library and configuration file. Only Edit Profile form has a token

injected into form. Other POSTed forms will be stopped by the Guard,

with an error logged.

· /lams_build/build.xml	(-0, +8)	\| History	\| Source	\| Diff
· /lams_build/build_base.xml	(-0, +7)	\| History	\| Source	\| Diff
· /lams_build/conf/j2ee/jboss-deployment-structure.xml	(-0, +1)	\| History	\| Source	\| Diff
· /lams_build/lib/csrfguard/csrf.module.xml	(-0, +34)	\| History	\| Source
· /lams_build/lib/csrfguard/csrfguard-3.1.0-2019.12.19.jar	(binary)	\| History	\| Source
· /lams_central/build.xml	(-0, +7)	\| History	\| Source	\| Diff
· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +3)	\| History	\| Source
· /lams_central/web/WEB-INF/tlds/security/csrfguard.tld	(-0, +70)	\| History	\| Source
· /lams_central/web/WEB-INF/web.xml	(-1, +33)	\| History	\| Source	\| Diff
· /lams_central/web/profile/editprofile.jsp	(-1, +3)	\| History	\| Source	\| Diff

lams-github (v4.7): LDEV-4932 Initial integration of CSRF Guard...

Marcin Cieslak — Thu, 19 Dec 2019 16:00:45 +0100

Marcin Cieslak committed 3cdcc42 on branch v4.7, v4.8 in lams-github

LDEV-4932 Initial integration of CSRF Guard

Add library and configuration file. Only Edit Profile form has a token

injected into form. Other POSTed forms will be stopped by the Guard,

with an error logged.

· /lams_build/build.xml	(-0, +8)	\| History	\| Source	\| Diff
· /lams_build/build_base.xml	(-0, +7)	\| History	\| Source	\| Diff
· /lams_build/conf/j2ee/jboss-deployment-structure.xml	(-0, +1)	\| History	\| Source	\| Diff
· /lams_build/lib/csrfguard/csrf.module.xml	(-0, +34)	\| History	\| Source
· /lams_build/lib/csrfguard/csrfguard-3.1.0-2019.12.19.jar	(binary)	\| History	\| Source
· /lams_central/build.xml	(-0, +7)	\| History	\| Source	\| Diff
· /lams_central/conf/security/Owasp.CsrfGuard.properties	(-0, +3)	\| History	\| Source
· /lams_central/web/WEB-INF/tlds/security/csrfguard.tld	(-0, +70)	\| History	\| Source
· /lams_central/web/WEB-INF/web.xml	(-1, +33)	\| History	\| Source	\| Diff
· /lams_central/web/profile/editprofile.jsp	(-1, +3)	\| History	\| Source	\| Diff